www-infrastructure-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse McConnell <jesse.mcconn...@gmail.com>
Subject Re: Official code signing certificate
Date Thu, 15 Aug 2013 11:39:37 GMT
my records teased out:

Geoffrey Noakes Geoffrey_Noakes@symantec.com

cheers,
jesse

--
jesse mcconnell
jesse.mcconnell@gmail.com


On Thu, Aug 15, 2013 at 4:51 AM, Mark Thomas <markt@apache.org> wrote:

> On 15/08/2013 01:33, William A. Rowe Jr. wrote:
> > Geoff... if he still works there.  Hopefully this is not a case of 'you
> > snooze, you lose'.
>
> Geoff who? Do you have a surname and e-mail address? My local archive
> doesn't go back that far and a quick search of the archives didn't turn
> up anything.
>
> Mark
>
> >
> > Does the windows installer provide any .dll's .. such as the IIS or
> > httpd JK connector?  I believe it does include a service control
> > module.  If so each binary and loadable module would also be signed
> > prior to .MSI packaging.
> >
> >
> > Mark Thomas <markt@apache.org> wrote:
> >
> > On 12/04/2013 16:52, William A. Rowe Jr. wrote:
> >
> >> As Rob is fond of pointing out, there are literally hundreds of
> >> moving parts in their release (and similarly in the httpd release
> >> as well - each loadable module must be signed).  I've asked and
> >> been assured that the Symantec service would have a batch/group
> >> automation-friendly submission process that could make this
> >> relatively painless.
> >
> > Bill,
> >
> > I'd like to make some progress on this.
> >
> > Given that we have gone around in circles a few times over excatly how
> > to handle code-signing I'd like to move forward with the Symantec
> > service and *if* we hit a snag then we can discuss alternative
> approaches.
> >
> > I plan to use Tomcat as the first test case primarily since as I am a
> > Tomcat committer and part of the infra team using Tomcat means I have
> > the karma to fix stuff as issues arise.
> >
> > Once we have this working for Tomcat's Windows installer, we can extend
> > this to other projects / artifact types (e.g. JARs).
> >
> > In order to move this forward, who do I need to contact at Symantec to
> > set up whatever accounts etc are required.
> >
> > Mark
> >
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message